CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: policy-controller, sops, fulcio, falcoctl, cosign, kubescape, zarf, skaffold, frp, terragrunt, dgraph, temporal, guac, rabbitmq-messaging-topology-operator, rook, weaviate, ko, spire-server, cloudflared, skopeo, argo-workflows, goreleaser, timestamp-authority, gitsig...

[SECURITY] Fedora 40 Update: cryptlib-3.4.7-5.fc40

Cryptlib is a powerful security toolkit that allows even inexperienced crypto programmers to easily add encryption and authentication services to their software. The high-level interface provides anyone with the ability to add strong security capabilities to an application in as little as half an...

MongoDB Server 安全漏洞

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . MongoDB Server suffers from a trust management issue vulnerability that stems...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: spicedb, kots, kube-bench, k3s, kine, kube-bench-fips, src, falcosidekick-fips, trillian, wavefront-collector-for-kubernetes, temporal-server-fips, argo-workflows-fips, step-ca, step, trillian-fips, caddy, ferretdb, argo-workflows, temporal-server, caddy-fips, amass...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kube-bench, amass, trillian, temporal-server, k3s, caddy, spicedb, src, step-ca, ferretdb, kots, kine, argo-workflows, step...

CVE-2024-27289 vulnerabilities

Vulnerabilities for packages: trillian, caddy, step-ca, kots, argo-workflows, step...

BIT-NODE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT

The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: thanos, newrelic-infra-operator, melange, kubewatch, metrics-server, prometheus-statsd-exporter, k3d, grafana-agent-operator, cluster-proportional-autoscaler, prometheus-adapter-fips, fulcio, zot, step, spire-server, memcached-exporter, up,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: kube-bench, amass, trillian, temporal-server, k3s, caddy, spicedb, src, step-ca, ferretdb, kots, kine, argo-workflows, step...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: spicedb, kots, kube-bench, k3s, kine, kube-bench-fips, src, falcosidekick-fips, trillian, wavefront-collector-for-kubernetes, temporal-server-fips, argo-workflows-fips, step-ca, step, trillian-fips, caddy, ferretdb, argo-workflows, temporal-server, caddy-fips, amass...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: spicedb, kots, kube-bench, k3s, kine, kube-bench-fips, src, falcosidekick-fips, trillian, wavefront-collector-for-kubernetes, temporal-server-fips, argo-workflows-fips, step-ca, step, trillian-fips, caddy, ferretdb, argo-workflows, temporal-server, caddy-fips, amass...

GHSA-M7WR-2XF7-CM9P vulnerabilities

Vulnerabilities for packages: kots, wavefront-collector-for-kubernetes, argo-workflows, argo-workflows-fips, caddy-fips, step-ca, step, trillian-fips, caddy, trillian...

Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates

Summary Vault and Vault Enterprise “Vault” TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate . In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass...

openSUSE: Security Advisory for ca (SUSE-SU-2023:0037-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for ca (SUSE-SU-2023:3454-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2024-1225 shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate...

CVE-2024-0407

Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store...

Information disclosure

Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store...

CVE-2024-0407 Certain HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Information Disclosure

Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to information disclosure, when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device's certificate store...

CVE-2023-40104

In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...